security-ownership-map

Analyzes Git history to build bipartite ownership maps of people and files.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/SameerG7/synthesis-hackathon-aibom --skill security-ownership-map-sameerg7
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-ownership-map
Source: https://github.com/SameerG7/synthesis-hackathon-aibom/tree/main/.codex/skills/security-ownership-map
Command: npx skills add https://github.com/SameerG7/synthesis-hackathon-aibom --skill security-ownership-map-sameerg7

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires networkx, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Build a bipartite graph linking people and files from git history to surface ownership risk and bus-factor insights.

Core Features & Use Cases

  • Graph construction: bipartite graph of people and files from commit history.
  • Ownership risk scoring and bus-factor metrics to identify critical maintainers.
  • Co-change graph and clustering to reveal file movement and hotspots.
  • Output artifacts: CSV/JSON ready for graph databases and visualization, including optional cochange graphs.
  • Use-case: Audit security-sensitive components to identify owners and drift across a large codebase.

Quick Start

From the repository root, run the ownership map script to generate the ownership artifacts.

Frequently Asked Questions about security-ownership-map

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I calculate bus factor and code ownership risk from git history?▼

Calculate bus factor and ownership risk by parsing git history to build a bipartite graph linking people to files, then scoring ownership concentration and identifying sensitive hotspots across repositories.

How do I generate a co-change graph to visualize file dependencies in a monorepo?▼

Generate a co-change graph by analyzing commit history with configurable thresholds and clustering to reveal file movement patterns and community-level hotspots across monorepos.

Does this git ownership analysis require networkx to build the graph?▼

Yes, building the security ownership graph and performing community-level clustering requires the networkx dependency to construct the bipartite relationships and analyze the network structure.

What output formats are generated when mapping code ownership and security hotspots?▼

Mapping code ownership generates CSV and JSON artifacts including people.csv, files.csv, edges.csv, summary.json, and optional cochange_edges.csv ready for graph databases and visualization.

Can I audit security-sensitive components and track ownership drift over a specific date range?▼

Yes, you can audit security-sensitive components and track ownership drift by applying date windows and sensitive-path rules to the git history analysis to isolate changes within specific periods.

What is the best way to identify critical maintainers and ownership bottlenecks in a large codebase?▼

The best way to identify critical maintainers is by constructing a bipartite graph from commit history to quantify bus-factor metrics and highlight ownership bottlenecks in sensitive codebase areas.